Your data,
treated like ours.

Scope of this policy.

This policy applies to information we collect through (a) our website, (b) inbound calls to numbers we operate, (c) outbound calls our licensed agents place under our brand or under a partner brand pursuant to a BAA / agency agreement, and (d) any form, landing page, or chat experience we run.

It does not apply to information you provide directly to a carrier, broker, or other third party after a transfer — that party's privacy policy governs their handling.

What we collect.

Information you provide

• Contact information — name, phone, email, mailing address
• Demographic information relevant to your quote — date of birth, household size, tobacco status, employment status, state of residence
• Health-related information when relevant to an insurance quote — only the questions required by underwriting
• Consent records, including TCPA written consent and SOA (where applicable)
• Recordings of calls you take with our agents

Information collected automatically

• Standard web analytics — IP address, browser, device, pages viewed
• Lead source — the URL or partner that referred you to us
• Cookies and similar technologies (manageable via your browser settings)

How we use it.

• To deliver the quote, plan, or service you requested
• To connect you with a licensed agent or carrier who can fulfill that request
• To comply with TCPA, DNC, HIPAA, CMS, and state insurance regulations
• To improve agent training and call quality (recordings, scored internally)
• To prevent fraud, abuse, and non-compliant activity
• To respond to your inquiries and customer service requests

We do not sell your personal information to third parties for advertising. We do not use your information for purposes unrelated to the service you requested.

Who we share with.

We share the personal information you provide only with parties involved in fulfilling your request:

• Licensed agents and carriers when you ask for a quote, enrollment, or transfer
• Service providers who operate our infrastructure (cloud hosting, telephony, CRM) under signed BAAs / DPAs
• Regulators or law enforcement when legally required
• Affiliated brands within 5 11 Enterprise that operate the same campaign

How long we keep it.

Retention periods vary by data type and applicable regulation:

• Consent records: 5 years (or applicable statute of limitations, whichever is longer)
• Call recordings: 2 years (10 years for Medicare under CMS)
• Personal information for active campaigns: through the relationship + 2 years
• Marketing analytics: aggregated/de-identified after 14 months

You can request deletion at any time (see Section 06).

Your rights.

Regardless of where you live, you have the right to:

• Know what information we hold about you
• Access a copy of it
• Correct anything that's wrong
• Delete your information (subject to legal retention requirements)
• Revoke consent for future contact
• Be added to our internal Do Not Call list

To exercise any of these, email privacy@511enterprise.com. We respond within 30 days.

California (CCPA / CPRA).

California residents have additional rights under the California Consumer Privacy Act and Privacy Rights Act:

• The right to know the specific pieces of personal information we hold
• The right to delete personal information (subject to exceptions)
• The right to correct inaccurate personal information
• The right to limit use of sensitive personal information
• The right to opt out of "sharing" for cross-context behavioral advertising — we do not engage in this
• The right to non-discrimination for exercising any of the above

To submit a verifiable consumer request, email privacy@511enterprise.com with subject "California Privacy Request."

EU / UK (GDPR).

For residents of the European Economic Area, United Kingdom, or Switzerland, our lawful bases for processing are: (a) your consent, (b) performance of a contract you've requested, (c) compliance with legal obligations, and (d) our legitimate interests in operating a compliant call center.

You have all the rights described in Section 06, plus the right to data portability and the right to lodge a complaint with your supervisory authority. Our EU Representative can be contacted at eu-rep@511enterprise.com.

Information from minors.

5 11 Enterprise does not knowingly market to or collect personal information from individuals under 18. If you believe a minor has provided us with personal information, please email privacy@511enterprise.com and we will promptly delete it.

How we keep it secure.

We use industry-standard technical and organizational measures to protect personal information: encryption at rest and in transit, role-based access controls, SSO with MFA for all production access, regular penetration testing, and a documented incident response plan. We are in process for SOC 2 Type II certification (target Q4 2026).

No system is perfectly secure. If we ever experience a breach affecting your information, we notify you and applicable regulators within 72 hours where required.

Changes to this policy.

We update this policy when our practices change, when regulations evolve, or when we add new services. Material changes are notified via email to active partners and posted at the top of this page for 30 days. The "Last updated" date at the top of this policy reflects the most recent revision.

Contact us.

For any privacy question, request, or concern:

• Email: privacy@511enterprise.com
• Phone: 1-800-555-0511 (option 5)
• Mail: 5 11 Enterprise, Privacy Office, 1 Market St #1000, San Francisco CA 94103

For compliance-specific concerns about a call you received, see our Compliance page.